Information Security Manager (m/w/d) Cloud
Core
Translating normative security requirements into clear guidelines, managing risk, and driving the continuous development of certifications for a cloud security team.
Role type
Senior Information Security Manager (GRC & Compliance)
Builds
Certified security management systems (ISMS) and risk registers for cloud operations
Domain
Cybersecurity / Information Security Management Systems (ISMS)
Required skills
ISMS management (ISO 27001, BSI IT-Grundschutz, BSI C5, PCI DSS), Risk management, Policy lifecycle management, Audit coordination, Stakeholder management, Regulatory compliance reporting
Preferred skills
Data privacy management systems (ISO 27701), Regulatory frameworks (GDPR, NIS-2, DORA), Cross-standard control mapping, GRC automation tools
Technologies
ISO 27001, BSI IT-Grundschutz, BSI C5, PCI DSS, ISO 27701, GDPR, NIS-2, DORA
Responsibilities
Operate and evolve the ISMS (Scope, Control Catalog, SoA, Management Review), Manage the full risk management cycle, Oversee the policy lifecycle (creation, approval, communication), Plan and lead internal and external audits, Coordinate certification strategy and international scaling, Establish readiness routines for technical and operational units, Serve as central interface for Data Protection, Legal, Authorities, and Crisis Communication
Seniority
Senior, hands-on IC
